Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/e7SUl4mSjdeGsAW__A2CvddXoNY.roa
File: e7SUl4mSjdeGsAW__A2CvddXoNY.roa (raw, json)
Hash identifier: CZDiVjjgs0Krs+aiXIc/FeDFsKFYjTe8hPduuFN8E2k=
Subject key identifier: 7B:B4:94:97:89:92:8D:D7:86:B0:05:BF:FC:0D:82:BD:D7:57:A0:D6
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 01942521958187D063ABCEFCB6B92B8D5EEF
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/e7SUl4mSjdeGsAW__A2CvddXoNY.roa
Signing time: Thu 02 Jan 2025 03:49:05 +0000
ROA not before: Thu 02 Jan 2025 03:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 5.11.20.0/24 maxlen: 24
5.11.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:95:81:87:d0:63:ab:ce:fc:b6:b9:2b:8d:5e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Jan 2 03:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bb4949789928dd786b005bffc0d82bdd757a0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e3:0b:88:1e:78:ce:25:38:7c:95:7c:ba:a2:
ae:76:42:e3:5a:ac:21:93:c7:20:2c:7e:f9:55:70:
05:c6:0d:dd:76:dd:0c:b1:f4:50:d7:30:c0:40:31:
c6:d3:ab:fc:97:b3:b9:10:67:9b:a1:6d:2f:fe:03:
35:43:50:b2:a4:84:1e:f7:cc:38:48:3e:67:13:76:
97:53:d2:7e:1e:e0:2f:23:d3:30:19:8d:b2:a3:32:
61:c8:bb:85:74:4a:fc:18:05:38:c3:71:e9:6d:cc:
6a:22:d0:47:a5:c3:b6:17:bf:96:b0:02:0c:3c:63:
b3:94:bf:c2:0c:c8:59:aa:aa:68:b0:e3:80:97:32:
98:ab:09:72:40:cf:6b:5f:b2:e5:18:89:42:bd:ec:
94:69:dd:64:d2:a6:10:10:ca:83:6c:e5:f1:94:83:
03:aa:43:a3:d9:dc:b5:5b:16:59:aa:3d:00:97:4f:
3b:21:e9:8c:a1:69:7a:79:f0:e3:ec:15:15:a6:4a:
42:b6:46:2b:9f:85:bf:92:e2:a9:0c:6e:90:4e:5f:
a1:c9:b0:91:55:3d:5f:ec:95:09:55:6b:78:c9:4f:
ee:83:f2:4d:49:e7:26:00:68:81:e2:03:ab:9c:4b:
cd:dc:e5:52:da:8d:4c:c3:20:88:64:15:c8:1a:1f:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B4:94:97:89:92:8D:D7:86:B0:05:BF:FC:0D:82:BD:D7:57:A0:D6
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/e7SUl4mSjdeGsAW__A2CvddXoNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.20.0/24
5.11.23.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f9:c8:16:d5:b7:a6:ae:cb:e0:b5:b8:1b:5f:69:33:3b:53:
26:ba:20:b1:5d:60:8c:81:55:17:a1:86:b3:d5:8b:85:bb:da:
22:50:e7:00:11:ec:2e:6f:f2:cf:0b:61:b2:82:fe:e3:3a:f1:
c4:58:3a:8a:22:85:1b:15:d7:66:38:51:41:a1:85:e0:e4:a3:
da:7f:02:b8:79:6f:62:cb:0f:76:d9:9a:ca:e4:fb:74:99:c2:
fe:56:39:c3:c2:df:fb:96:39:ed:f2:dc:c5:e9:41:c4:7c:3a:
2d:5f:54:83:e4:b7:6c:cb:2f:b2:57:0c:d0:ac:c3:55:cd:40:
43:8e:9c:b9:e8:89:76:0b:c9:36:35:4f:1d:7d:1d:18:dd:bb:
e2:81:a4:6a:30:9c:7f:e4:b2:0d:ac:99:0b:2c:d5:2e:d5:9d:
d7:13:2b:f3:5c:d8:12:40:9d:e8:f5:1d:6f:7d:77:7d:06:a7:
44:52:26:08:46:41:88:29:ae:29:2a:43:ba:fa:eb:11:bc:45:
f3:c4:82:b0:82:60:04:a6:48:ba:80:93:82:43:9d:cb:44:09:
56:23:4c:5d:8c:04:e0:49:d4:4d:cf:a4:e8:3c:d3:72:18:97:
2b:b6:e1:2d:93:3f:a7:1c:5c:8a:ba:5b:59:68:49:6f:a2:01:
76:f6:39:27
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIZWBh9Bjq878trkrjV7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjEyY2U2YTkxMDMwZTI3ZDVhYmFkMTQ2ZGYyN2JjMjg4
MDY1MmIwHhcNMjUwMTAyMDM0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmI0OTQ5Nzg5OTI4ZGQ3ODZiMDA1YmZmYzBkODJiZGQ3NTdhMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eMLiB54ziU4fJV8uqKudkLjWqwh
k8cgLH75VXAFxg3ddt0MsfRQ1zDAQDHG06v8l7O5EGeboW0v/gM1Q1CypIQe98w4
SD5nE3aXU9J+HuAvI9MwGY2yozJhyLuFdEr8GAU4w3HpbcxqItBHpcO2F7+WsAIM
PGOzlL/CDMhZqqposOOAlzKYqwlyQM9rX7LlGIlCveyUad1k0qYQEMqDbOXxlIMD
qkOj2dy1WxZZqj0Al087IemMoWl6efDj7BUVpkpCtkYrn4W/kuKpDG6QTl+hybCR
VT1f7JUJVWt4yU/ug/JNSecmAGiB4gOrnEvN3OVS2o1MwyCIZBXIGh+GTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHu0lJeJko3XhrAFv/wNgr3XV6DWMB8GA1UdIwQY
MBaAFL6xLOapEDDifVq60UbfJ7wogGUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMt
YTdhZGU0MzRkNDUxLzEvZTdTVWw0bVNqZGVHc0FXX19BMkN2ZGRYb05ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMtYTdhZGU0MzRkNDUx
LzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABQsUAwQA
BQsXMA0GCSqGSIb3DQEBCwUAA4IBAQBk+cgW1bemrsvgtbgbX2kzO1MmuiCxXWCM
gVUXoYaz1YuFu9oiUOcAEewub/LPC2Gygv7jOvHEWDqKIoUbFddmOFFBoYXg5KPa
fwK4eW9iyw922ZrK5Pt0mcL+VjnDwt/7ljnt8tzF6UHEfDotX1SD5Ldsyy+yVwzQ
rMNVzUBDjpy56Il2C8k2NU8dfR0Y3bvigaRqMJx/5LINrJkLLNUu1Z3XEyvzXNgS
QJ3o9R1vfXd9BqdEUiYIRkGIKa4pKkO6+usRvEXzxIKwgmAEpki6gJOCQ53LRAlW
I0xdjATgSdRNz6ToPNNyGJcrtuEtkz+nHFyKultZaElvogF29jkn
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:55:34 2025 by rpki-client